Harden DCR and cleanup OAuth authorization UI

Improve OAuth Device Code Request security and align UI with design standards.